PowderLedger

PowderLedger is a production-grade, multi-tenant SaaS platform for US ski and snowboard rental shops. Live at https://powderledger.com. It's the full rental-shop operating system: POS, inventory, reservations, lessons, payments, customer portal, and back-office analytics — one app, one database, role-gated by shop. - Scale: 559 app directories, 328 API routes, 70+ Prisma models, 254 pages, 179 components - Stack: Next.js 14 App Router · TypeScript · Prisma 5 · PostgreSQL (Neon) · NextAuth (JWT, role-based) · Tailwind + Radix · Vercel deploy · Stripe + Square · Twilio · Resend · Anthropic Claude · Upstash Redis (rate limiting) · Vercel Blob / S3 / R2 storage - Compliance: PCI SAQ-A (no raw cards), CCPA/CPRA + COPPA, AES-256 at rest, CSP/HSTS, Zod validation everywhere, webhook signature verification, 7-yr retention with auto-anonymization What it can do Front-of-house (POS + counter ops) - Scan-first checkout in <60 seconds with barcode scanner, configurable quick-key hotbar, dollar/percent discounts, sale-complete animation, receipt printing/reprint - Express pickup queue and kiosk mode for self-serve - Pre-arrival flow + kiosk pre-check-in to skip the counter Inventory - Serialized item tracking with full status history - Grid and list views with photo thumbnails, tap-to-change inline status - Bulk status updates and bulk CSV import/export - Per-item rental count, maintenance-due alerts, inter-location transfers - Stock intake sessions and damage assessment with return photos Rentals + reservations - Full checkout → check-in lifecycle with damage routing - Stripe deposit pre-auth and release - Guest reservations with optional pre-allocation, daily pull list for fulfillment, waitlist, allocation per guest - Customer fit profiles saved across visits; DIN calculator for ski bindings - Reservation state machine including the new COMPLETED close-out (shipped 2026-05-21) with TOCTOU-safe concurrent-modification guard Lessons + appointments - Instructor scheduling, availability calendar, lesson packages (private/group), Square Appointments sync, kids-program tracking Customer-facing - Self-service portal (/portal) for booking, rental history, US-compliant electronic waiver signing - Magic-link auth, customer feedback + NPS capture - Embeddable widget (/embed) so shops can drop booking into their own marketing site - Referral and review collection Payments + billing - Stripe + Square (incl. Square Terminal), deposit holds, refunds, payment intents - Subscription billing for the SaaS itself with plan-gated feature flags (fail-closed) - Gift cards, season passes, season-pass swaps, resort-partner lift-ticket bundles, promo codes, pricing overrides, dynamic pricing Service center + ops - Work orders, work-order items, maintenance rules, maintenance logs, checklist items - Shifts, shift swap requests, shift notes, till sessions, end-of-day cash reconciliation - Document storage, weather forecast integration, marketing campaigns AI layer (Claude-powered) - /dashboard/ai and /dashboard/ai-command-center - Agent log, customer-memory store, reflection results, AI learning events, model-weight tracking, AI insights — i.e., it's not just a chat box; it has memory and a feedback loop wired into the schema Multi-tenant + platform - Hierarchical roles SUPERADMIN > ADMIN > MANAGER > STAFF > CASHIER - Every API route is org-scoped via getOrganizationId() and audited via createAuditLog() - License model with usage tracking and license audit log - Platform-level analytics roll-up across all shops for SUPERADMIN - Multi-location support per organization, group-sync across locations, network view Reliability + scale - Real-time inventory via WebSocket; IndexedDB-backed offline mode with sync queue + conflict resolution (dedicated test harness: concurrency, websocket stress, offline scenarios, service worker, IndexedDB, sync queue, network simulation) - safe-migrate-deploy.js wraps prisma migrate deploy with retries for Neon advisory-lock flake - Audit handoff docs/audit-handoff-pass-99.md documents 99+ security passes; tenant isolation, auth, webhook sig, Stripe billing fail-closed all verified clean Recent state EMBED-V1 copy fix and the 5 unverifiable HIGHs (DASH/WO/PULL/LESSONS/PROMO) all closed since 2026-05-21 — the audit queue is essentially drained. --- In one line: PowderLedger is a Square + Mindbody + Booqable replacement, purpose-built for the operational quirks of a ski/board rental shop, with a Claude-powered ops assistant bolted on.